SC-16(1)

Requirement

Verify the integrity of transmitted security and privacy attributes.

Discussion

Part of verifying the integrity of transmitted information is ensuring that security and privacy attributes that are associated with such information have not been modified in an unauthorized manner. Unauthorized modification of security or privacy attributes can result in a loss of integrity for transmitted information.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing the transmission of security and privacy attributes; access control policy and procedures; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing verification of the integrity of transmitted security and privacy attributes].

ID	Assessment Objectives
SC-16(01)[02]	the integrity of transmitted privacy attributes is verified.
SC-16(01)[01]	the integrity of transmitted security attributes is verified;

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!